A vulnerability classified as critical has been found in virtualenv up to 20.26.5. Affected is an unknown function of the component Activation Script Handler. The manipulation leads to command injection.

This vulnerability is traded as CVE-2024-53899. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.